Tennessee's Hemp QR Code Rule: an Invalid Link Is Itself a Violation

Tennessee rebuilt its hemp regime for 2026: oversight of hemp-derived cannabinoid products (HDCPs) moved from the Department of Agriculture to the Alcoholic Beverage Commission, every supplier now holds a TABC license, and the label QR requirement got teeth. The rule doesn't just say "put a QR code on the label" — it says a QR code that doesn't link to a valid COA is invalid and a violation. If your printed QR points at a dead or wrong page, the label itself is the problem.

What the rule actually says

The current requirement lives in TABC Rule 0100-15-.07(1)(e) (Rules for Suppliers and Wholesalers of Hemp-Derived Cannabinoid Products, effective June 9, 2026), implementing Tenn. Code Ann. § 57-7-110 (2025 Public Chapter 526). The rule, verbatim:

"A QR code that links the viewer to the COA of the applicable product testing results… A QR code that does not link to a valid COA, including the product's batch number, date received, date of testing completion, and method of analysis, as established in T.C.A. § 57-7-107, will be considered invalid and a violation of this rule."

And the statute spells out what the scanned page must provide:

"A quick response (QR) code that can be scanned to access a website providing the product's batch number, date received, date of testing completion, and method of analysis for the testing report required under § 57-7-107, including information regarding results of the product's full-panel and potency tests…"

Sources: Tenn. Comp. R. & Regs. 0100-15-.07(1)(e) (official rules PDF, June 2026 revision) and Tenn. Code Ann. § 57-7-110(a)(1)(C)(vi) (Public Chapter 526). The TABC's own FAQ puts it simply: "Each product must be labeled with a QR code linking to the product's Certificate of Analysis (COA)."

So what does the QR have to land on?

Reading the rule and statute together, the scanned page has to actually provide, for the specific product:

To be precise about what the rule does not say: it doesn't ban linking to your own website — a separate subsection even allows an outer-package QR "linking to the manufacturer's website that lists the information" when a small label can't fit everything. The operative test is whether the scan actually reaches a valid COA with those elements. A link that makes the viewer hunt through menus, a folder link that gets reorganized, or a generic lab-results page that doesn't tie to the batch — that's where "does not link to a valid COA" starts to bite.

The practical read: the riskiest thing on a Tennessee HDCP label is a QR pointing at a page you might later move, redesign, or replace. The label is printed; the rule judges what the scan lands on, any day an inspector checks. A stable page per batch whose only job is showing that batch's COA is the boring, safe answer.

Who this applies to, and since when

The failure mode Tennessee just made expensive

Most small brands host COAs wherever it was convenient the day the lab emailed them — a page on the website, a shared folder, a PDF at some URL the web designer picked. Then the site gets redesigned, the folder gets cleaned up, a new lab report replaces the old file. Every one of those events silently invalidates a QR code that's already printed on packages sitting on Tennessee shelves — and under 0100-15-.07(1)(e), an invalid QR is a rule violation, not a cosmetic bug.

The fix is structural: one permanent URL per batch, printed once, that always resolves to that batch's current, valid COA — even when the certificate behind it needs updating.

A permanent COA page for every batch

BatchLink gives each batch one permanent URL + printable QR that opens the COA directly — batch number, lab, and test dates on the page. Swap the certificate anytime (a retest, a corrected report) without changing the printed link. Free for your first two batches.

Create a free batch page

Related reading

This page summarizes the current Tennessee statute and TABC rules as of July 2026 in plain English. It isn't legal advice; the official rule text and the TABC's current guidance control. Verify against the sources linked above before a print run.